Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File:                     jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier:          MJCUonJbz04Yr7W2zpytCxqxYevXWaL+8dhsu66IJvU=
Subject key identifier:   4F:00:AA:E5:A8:71:52:95:86:73:A5:B3:2A:61:00:04:12:E9:4C:79
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer:       /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial:       01A0D5A6F2691C3AC656E7079FF4A2E2A887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number:          0AB0
Signing time:             Thu 24 Sep 2026 23:01:23 +0000
Manifest this update:     Thu 24 Sep 2026 23:01:23 +0000
Manifest next update:     Fri 25 Sep 2026 23:01:23 +0000
Files and hashes:         1: PQ4kixVMpunmZd3Y9lneEnubVHU.roa (hash: Yf8PqpssV4aPe31IuLnMjahZv8QaQaygjHQtEb4Jhyc=)
                          2: h8m3UyCHdJZvavzOM3kO78iBzSs.roa (hash: 7o6/q7pQ3291TBvgsO2xLF2/udPbMNgFs9of9Kxrm4o=)
                          3: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: Oc+P7U+deyNnIbtSMQYEjLfn2gpfajZd5HN4vX734OI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:f2:69:1c:3a:c6:56:e7:07:9f:f4:a2:e2:a8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
        Validity
            Not Before: Sep 24 23:01:23 2026 GMT
            Not After : Sep 25 23:01:23 2026 GMT
        Subject: CN=4f00aae5a87152958673a5b32a61000412e94c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:a6:bb:0c:74:48:c0:9f:43:79:c2:6d:fb:
                    03:a6:a7:1c:7a:ff:38:02:de:50:a8:75:43:a1:d3:
                    16:9e:aa:63:0d:6a:f5:aa:39:51:ea:0e:14:8f:b2:
                    80:88:f1:8a:cb:3a:48:f4:b6:98:0e:68:6d:1c:56:
                    bf:c5:ee:32:b8:cd:8e:e1:c8:e7:bf:ba:ad:f9:14:
                    6b:8a:49:61:46:af:15:57:73:09:11:8e:34:b7:31:
                    8c:55:51:34:fd:3e:e3:12:f3:48:4d:3a:91:da:dd:
                    cb:6d:30:e8:72:db:21:fa:e4:c2:66:c9:ab:d4:34:
                    b8:57:79:5e:07:76:71:ac:76:f9:09:a0:14:e6:9e:
                    fe:46:43:99:9c:2d:43:e6:cc:1b:d3:9f:0e:b9:33:
                    14:52:c2:c9:87:db:ca:51:2b:b5:fd:5e:71:a9:8d:
                    94:cb:b4:75:16:07:f6:aa:54:47:ac:24:7d:fc:3e:
                    5e:88:37:b7:80:13:98:0a:ac:0f:41:b1:ee:07:e1:
                    bd:dd:5f:c6:9c:57:7e:d9:4d:31:cc:11:c4:b0:e2:
                    99:6c:c7:5f:2a:5a:25:27:f9:49:b3:41:de:c5:3e:
                    b5:21:d3:f0:c3:31:0e:b4:b9:a7:f8:d0:01:08:1d:
                    ed:50:c3:62:50:3a:49:58:f8:4a:15:9e:bf:45:31:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:00:AA:E5:A8:71:52:95:86:73:A5:B3:2A:61:00:04:12:E9:4C:79
            X509v3 Authority Key Identifier:
                keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4e:f4:98:56:5e:ac:92:d1:59:b5:34:76:cf:20:77:c1:58:
         3b:7e:e4:b1:3b:b3:b4:6a:6d:a1:3d:6c:e0:d6:3e:c5:2e:a2:
         89:61:77:ca:83:13:63:e6:22:5f:ad:4f:23:d5:96:77:9f:df:
         16:61:2a:ad:06:ee:9f:4b:41:29:41:87:50:f0:fe:44:1d:88:
         36:0e:f1:95:21:df:b0:da:2e:52:47:cd:2d:73:96:98:8b:79:
         2c:3e:be:c1:cc:7b:d2:ec:0e:32:5d:8a:00:a0:36:0d:7d:18:
         09:81:78:36:14:2c:22:fe:84:76:b6:c3:08:5d:30:85:bc:64:
         ad:6e:b6:b4:3c:e8:d5:2d:e1:ff:c7:8e:60:b2:b9:9e:04:82:
         2e:38:cd:70:79:9b:5c:f7:95:5c:8f:11:7a:cd:86:67:ed:67:
         c9:2f:fb:d8:f9:8d:80:17:8f:d2:27:6c:2d:27:41:64:46:3e:
         92:c1:b4:d0:93:92:27:97:67:aa:ac:d1:6c:89:26:c0:94:cb:
         4a:92:15:21:84:55:81:f7:ff:7b:32:26:3d:f3:f5:3d:dc:5a:
         71:85:96:6f:59:82:9f:93:7d:40:5b:a8:02:9a:99:64:fb:ac:
         88:c8:dc:cf:a6:16:0e:22:7d:6c:6b:f4:ba:48:2b:3f:66:8b:
         e0:43:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:50:25 2026 by rpki-client